Florian Gaultier c43e3cf581 Improve block_create_remote_process to point on shellcode everytime

2014-05-13 16:04:38 +02:00

..

block

Improve block_create_remote_process to point on shellcode everytime

2014-05-13 16:04:38 +02:00

kernel

Forgot the updated build.py, also add in a link to a blog post I wrote for this shellcode.

2010-02-26 14:27:13 +00:00

migrate

Commit the updated APC injection stubs. fixes a nasty issue in some edge cases whereby when using APC injection for a process in another session then the current host process the injected APC can cause an access violation in kernel32 during a call the kernel32!CreateThread caused by the APC's host thread not having an initialized Activation Context inside its TEB. We now test for this and create a dummy ActivationContext entry to appease the kernel. This will both improve DLL injection reliability as well as meterpreter migration reliability.

2010-03-11 17:00:19 +00:00

single

Improve block_create_remote_process to point on shellcode everytime

2014-05-13 16:04:38 +02:00

stage

Overhaul of the metasploit payloads from Stephen Fewer - smaller/cleaner/new hashing/support for WinNT 4.0 -> Win7 with size reductions for the stagers and minimal size increases for the singles

2009-07-31 17:50:10 +00:00

stager

Unify reverse_http and reverse_https

2014-02-04 09:09:12 -06:00

hash.py

Overhaul of the metasploit payloads from Stephen Fewer - smaller/cleaner/new hashing/support for WinNT 4.0 -> Win7 with size reductions for the stagers and minimal size increases for the singles

2009-07-31 17:50:10 +00:00

test_rc4.asm

Whitespace

2013-04-10 09:28:45 -05:00